Lucene search
+L

14226 matches found

CNNVD
CNNVD
added 2025/01/18 12:00 a.m.17 views

IBM App Connect Enterprise 安全漏洞

IBM App Connect Enterprise is an operating system from International Business Machines IBM.IBM App Connect Enterprise combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud-native IBM App Connect Enterprise combines existing...

4.9CVSS6.3AI score0.00381EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/18 12:00 a.m.12 views

PT-2025-2827 · Ibm · Ibm App Connect Enterprise

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 12.0.1.0 through 12.0.7.0 IBM App Connect Enterprise version 13.0.1.0 Description: The issue allows a privileged user to obtain JMS credentials under certain configurations. This is related to improper...

4.4CVSS6.4AI score0.00381EPSS
SaveExploits0References7
OSV
OSV
added 2025/01/17 8:34 p.m.10 views

CVE-2025-23206 IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk

The AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow...

1.8CVSS6.7AI score
SaveExploits0References9
NCSC
NCSC
added 2025/01/17 8:54 a.m.9 views

Vulnerabilities fixed in Ivanti Connect Secure and Policy Secure

Ivanti has fixed vulnerabilities in Connect Secure and Policy Secure. The first vulnerability CVE-2025-0282 can be exploited by malicious parties to execute arbitrary code remotely without authentication. The second vulnerability CVE-2025-0283 can be exploited by a locally authenticated malicious...

9CVSS9.8AI score0.99979EPSS
SaveExploits14References2
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.6 views

PT-2025-8847

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists due to insufficient bounds checking in the nci hci create pipe function. The pipe variable, which is a u8 value coming from the network, can cause memory...

7.8CVSS6.8AI score0.00373EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/01/16 2:45 p.m.319 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC exploit for CVE-2025-0282, a remote unauthenticated stack-ba...

9CVSS8.7AI score0.99979EPSS
SaveExploits14
zdt
zdt
added 2025/01/16 12:00 a.m.316 views

Ivanti Buffer Overflow Proof of Concept Exploit

Proof of concept exploit for CVE-2025-0282, a remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways. PoC for CVE-2025-0282, a remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure,...

9CVSS8.2AI score0.99979EPSS
SaveExploits14
Packet Storm News
Packet Storm News
added 2025/01/16 12:00 a.m.8 views

Ivanti Connect Secure IFT TLS Stack Overflow / Remote Code Execution

This is an Ivanti Connect Secure IFT TLS stack overflow pre-authentication remote code execution proof of concept exploit. It is crippled by default...

9CVSS8.4AI score0.99979EPSS
SaveExploits14
GithubExploit
GithubExploit
added 2025/01/15 6:27 p.m.262 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre...

9CVSS7.2AI score0.99979EPSS
SaveExploits14
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/14 12:15 a.m.8 views

Malicious code in ebay-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d19ac42f1b12b95f81ed89c55872795f9fceb4ea498c981624eb1eb04828bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/01/14 12:15 a.m.6 views

MAL-2025-107 Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/14 12:15 a.m.7 views

Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2025/01/14 12:15 a.m.8 views

MAL-2025-83 Malicious code in ebay-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d19ac42f1b12b95f81ed89c55872795f9fceb4ea498c981624eb1eb04828bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/01/14 12:00 a.m.14 views

Ivanti CVE-2025-0282 Checker

This script allows you to safely scan and test to see if you are vulnerable to CVE-2025-0282, a stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 that allows a...

9CVSS8.5AI score0.99979EPSS
SaveExploits14
BDU FSTEC
BDU FSTEC
added 2025/01/14 12:00 a.m.20 views

The vulnerability of the App Connect Enterprise Certified Container management tool, related to unlimited resource distribution, allows a attacker to cause a service failure.

The vulnerability of the App Connect Enterprise Certified Container management tool is related to the unlimited distribution of resources during the process of writing files to the local file system. Exploiting this vulnerability can allow a attacker to cause service failures...

5.5CVSS5.4AI score0.0016EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.20 views

The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons for ZTA – tools for managing IT services – stems from a buffer overflow in the stack. This vulnerability allows attackers to escalate their privileges.

The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA, which are tools for managing IT services, is related to a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.4AI score0.17429EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.24 views

The vulnerability of the OpenVPN Connect software lies in the improper deletion of critical data at the boundary; this allows a hacker to increase their privileges.

The vulnerability of the OpenVPN Connect software is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.8CVSS8.1AI score0.00546EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
added 2025/01/12 11:58 a.m.234 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

Storks: Remote Code Execution Vulnerability Exploitation Tool...

9CVSS8.3AI score0.99979EPSS
SaveExploits14
GithubExploit
GithubExploit
added 2025/01/11 2:06 a.m.345 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulne...

9CVSS7.8AI score0.99979EPSS
SaveExploits14
HackRead
HackRead
added 2025/01/10 9:21 p.m.15 views

Ivanti Urges Patch for Flaws in Connect Secure, Policy Secure and ZTA Gateways

Ivanti has issued a critical security advisory addressing two vulnerabilities in its Connect Secure, Policy Secure, and ZTA Gateway products...

7.6AI score
SaveExploits0
Rows per page
Query Builder